<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta http-equiv="Content-Security-Policy" content="script-src 'self';form-action 'self'; report-uri /report">
    <title>Document</title>
</head>
<body>
    <div>This is content</div>
    <form action="http://baidu.com">
        <button type="submit">click me</button>
    </form>
    <script>
        console.log('inline js')
    </script>
    <script src="/test.js"></script>
    <script src="https://cdn.bootcss.com/jquery/3.4.1/core.js"></script>
    <script src="http://www.baidu.com/img/dong_a38183314e67f1faa402cfb5bfc2f5a3.gif"></script>
</body>
</html>